A recently patched security vulnerability in the EngageLab SDK, a widely used third-party Android software development kit, has put millions of users at risk, including those with cryptocurrency wallets.
The vulnerability, which could have been exploited by malicious apps on the same device, allowed attackers to bypass Android’s security sandbox and gain unauthorized access to private data.
According to reports, the flaw could have affected up to 50 million Android users, including 30 million users with cryptocurrency wallet installs, making it a significant threat to the security of sensitive financial information.
The issue was identified by Microsoft Defender, which noted that the vulnerability could have been used by malicious actors to steal sensitive data, including cryptocurrency wallet information.
The patch for the vulnerability has been released, and users are advised to update their apps to the latest version to ensure their security.
Android users are reminded to be cautious when installing apps and to keep their devices and apps up to date to minimize the risk of falling victim to such vulnerabilities.
Source: Original Article
